01 — Live State and SSOT Confirmation

All facts below were live-verified this run (RO query_pg + RW ssh contabo→docker exec postgres psql -U directus). Old reports treated as evidence; live evidence wins.

Execution environment

• ssh contabo OK; docker exec postgres psql -U directus → user directus, transaction_read_only=off → EXECUTION_MODE with additive-write capability.
• Write-allowlist file surface OK: /opt/incomex/docs/mcp-writes/ (created subdir dot-agent-api-endpoint-2026-06-04/).
• RO query_pg role: transaction_read_only not introspectable (denied), 5s statement_timeout, LIMIT 500.

Baselines (start)

birth_registry=1,163,409 · trigger_guard_alerts=129 · process_run_observation=4 · process_component_observation=6 · DRY_RUN+REAL_RUN obs=0.

Runtime gates (all fail-closed — confirmed)

dot_config: process_dot_runtime.execute_enabled=false, …real_run_enabled=false, …dry_run_only=true; piece_event_runtime.emit_enabled=false, …dry_run_only=true; iu_core.operator_runtime_enabled=false. No agent_api/endpoint config/credential key exists.

Contracts (dot_agent_api_contract)

2 rows, both contract_ready, no_mutation_assertion=true, output_namespace=DRYRUN-NS:dot:kg:explain, fixture_ref=FIXTURE:dot:kg:explain:v1, endpoint_ref=NULL:

• DOT_KG_EXPLAIN — producer, mode PLAN_ONLY.
• DOT_KG_EXPLAIN_VERIFY — verifier, mode VERIFY_ONLY.

DOTs (dot_tools)

Both: extra_metadata.execution_engine='agent_api', script_path=NULL, file_path=NULL, usage_count=NULL, last_executed=NULL. No execution body.

Dispatcher / functions (all present)

fn_process_agent_api_dispatch(6 args), fn_process_dryrun_prepare_pair(9), fn_process_run_observe(13), fn_process_component_observe(16). The dispatcher cannot execute a DOT and refuses DRY_RUN while endpoint_ref IS NULL.

Containers (no agent_api executor)

10 containers: agent-data, claude-kb, claude-mcp, directus, nginx, nuxt, qdrant, postgres, pg-restore-test, uptime-kuma. None is a generic agent_api DOT executor. claude-kb/claude-mcp are MCP/RAG servers, not a DOT invocation endpoint.

Candidate universe (17, via candidate_status_v3)

1 verified (job:cut, 8 members, VERIFIED_PENDING_OWNER, owner_missing), 1 simulated_observed (dot:kg, 36 members), 7 structural_candidate, 8 not_a_process. job:cut correlation = job_queue.run_id (real). dot:kg correlation = none.

v5 read-back

agent_api_contract_status: pilot pair = contract_ready_endpoint_missing; other 10 KG agent_api DOTs = contract_missing (uninflated). verified_candidates_v3 = 1 (job:cut). candidate_status_v5 deep view times out under RO 5s (known; resolves via RW/app).

SSOT confirmation

Checkpoint checkpoint-dot-agent-api-contract-dispatcher-2026-06-04.md matches live state except birth_registry drift (1,163,392→1,163,409, background KB doc births). Accepted as SSOT; this macro builds on it.